$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/82ee65a1-8fcb-3733-99fe-c853616a309c.roa File: 82ee65a1-8fcb-3733-99fe-c853616a309c.roa (raw, json) Hash identifier: P4NBrz8Ms84fAFgYG1tPp0eu1HXlUmTsojDz2jCHvG4= Subject key identifier: 56:89:5F:45:E4:87:E6:B4:6F:31:D0:E3:28:ED:6F:7D:40:0D:61:34 Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Certificate serial: 010D0C9F4328584F506D46857C50CD37F54668C0 Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/82ee65a1-8fcb-3733-99fe-c853616a309c.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 170.176.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:46:85:7c:50:cd:37:f5:46:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3bf87be4-965a-43a2-b3d6-40d2713490b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:51:0b:14:e0:b1:61:be:46:24:b3:d0:fe:2a: 2d:cf:5d:7c:a4:81:e2:f7:9a:f7:28:82:b1:f3:e9: 8d:04:2d:65:b9:8a:58:59:bd:91:0b:60:14:23:31: e8:28:0d:ea:ee:1e:7e:29:58:5a:fe:c5:30:ea:92: 22:28:21:66:71:6e:c4:d8:0d:27:e3:20:05:7e:56: 35:9f:fe:54:d2:09:f7:34:09:1d:19:82:3c:17:7e: ee:c6:25:53:56:7d:34:6b:af:e0:6d:70:49:c2:26: e6:fc:c8:c9:b8:a4:34:c5:65:b1:0e:e6:df:79:b7: 69:8b:5c:31:92:7e:6c:44:85:db:30:c4:ce:db:1b: f3:38:38:5f:94:ec:39:2a:5c:60:8b:f6:85:7e:82: c9:2d:83:a2:56:a5:e5:b6:16:02:c2:a2:68:b3:31: e4:2c:0a:51:f9:d0:93:32:8d:94:0c:d9:f0:f1:75: b7:59:e6:5c:3f:79:c4:86:83:d6:0a:31:68:9b:1a: a0:8e:5b:3f:a8:92:83:a1:3a:e0:ef:24:80:1c:24: 96:3a:e9:be:5e:32:f8:e9:c8:2e:3e:30:c3:1e:3a: ca:d8:69:94:92:a3:09:7d:cc:82:87:48:fa:0b:80: f6:5d:c8:be:75:36:f1:70:40:2d:f9:ad:72:6a:48: d9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:89:5F:45:E4:87:E6:B4:6F:31:D0:E3:28:ED:6F:7D:40:0D:61:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/82ee65a1-8fcb-3733-99fe-c853616a309c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl X509v3 Authority Key Identifier: keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer sbgp-ipAddrBlock: critical IPv4: 170.176.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:79:1c:d6:83:8c:d0:e0:53:0e:13:75:e6:9b:c7:0d:14:46: 30:57:c2:c4:9c:62:d1:f0:67:2e:74:c7:e0:c8:b5:9b:5d:6d: e2:30:bf:d5:3d:c7:4a:6f:80:dc:2f:79:f2:91:3d:0d:76:43: a4:29:ca:f2:b9:2c:c1:b9:b5:52:0c:08:e7:af:0c:95:f7:92: 84:1d:4a:d1:41:9a:92:b9:db:c8:b4:2f:75:67:cd:30:e1:52: 28:b9:c9:ab:d6:ee:9c:fb:04:9a:22:af:65:a1:97:62:c6:3d: 7e:6d:d1:ba:be:44:a7:4c:35:4f:21:58:2c:70:c8:fe:7d:59: 8b:eb:d4:65:ca:81:ec:b9:7e:e0:e7:a5:2b:51:12:34:34:0a: 9a:4b:e0:88:8a:58:a7:5c:db:b1:8b:49:5b:2f:eb:eb:cb:f1: 18:4b:c5:5f:31:98:1c:3e:fa:4d:01:a8:11:d6:a1:87:2a:97: d4:b9:f2:2f:6a:b2:22:2f:74:f7:c6:af:af:c5:5a:67:75:fb: 02:62:a9:8a:da:96:bf:f0:ae:25:75:95:78:10:01:d9:ba:e0: 27:db:8a:92:4f:eb:3e:38:c2:a7:4f:5e:33:62:50:56:5e:48: 4e:d5:cb:64:c9:9a:3f:75:b7:23:90:3d:d1:dd:db:ba:2f:dd: 45:ff:0c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUaFfFDNN/VGaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk Y2M0MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2JmODdiZTQtOTY1YS00M2EyLWIzZDYtNDBkMjcxMzQ5MGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlELFOCxYb5GJLPQ/iotz118pIHi95r3KIKx 8+mNBC1luYpYWb2RC2AUIzHoKA3q7h5+KVha/sUw6pIiKCFmcW7E2A0n4yAFflY1 n/5U0gn3NAkdGYI8F37uxiVTVn00a6/gbXBJwibm/MjJuKQ0xWWxDubfebdpi1wx kn5sRIXbMMTO2xvzODhflOw5Klxgi/aFfoLJLYOiVqXlthYCwqJoszHkLApR+dCT Mo2UDNnw8XW3WeZcP3nEhoPWCjFomxqgjls/qJKDoTrg7ySAHCSWOum+XjL46cgu PjDDHjrK2GmUkqMJfcyCh0j6C4D2Xci+dTbxcEAt+a1yakjZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaJX0Xkh+a0bzHQ4yjtb31ADWE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvODJlZTY1YTEtOGZjYi0z NzMzLTk5ZmUtYzg1MzYxNmEzMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3 ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5 M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd5HNaDjNDgUw4Tdeabxw0URjBXwsScYtHwZy50x+DItZtdbeIwv9U9 x0pvgNwvefKRPQ12Q6QpyvK5LMG5tVIMCOevDJX3koQdStFBmpK528i0L3VnzTDh Uii5yavW7pz7BJoir2Whl2LGPX5t0bq+RKdMNU8hWCxwyP59WYvr1GXKgey5fuDn pStREjQ0CppL4IiKWKdc27GLSVsv6+vL8RhLxV8xmBw++k0BqBHWoYcql9S58i9q siIvdPfGr6/FWmd1+wJiqYralr/wriV1lXgQAdm64CfbipJP6z44wqdPXjNiUFZe SE7Vy2TJmj91tyOQPdHd27ov3UX/DCg= -----END CERTIFICATE-----Generated at Thu Oct 8 00:57:09 2026 by rpki-client